
@AppSecEngineeri
š®š³Account based in!
About this account
- Account based in
- India
- Connected via
- India Android App
! X says this location may be affected by a proxy or VPN.
Account-level information from X, not a live location or the device used for a specific post.
Painless Application Security Training for Enterprises. Empower Your Teams. Build Secure Applications.
United States
Joined March 2018
- Tweets5.4K
- Following207
- Followers4.8K
- Likes1.6K
The biggest myth in AI security?
āInternal users are safe.ā
In reality, your LLM chat interface might already be a data exfiltration channel.
All it takes is the right prompt.
Hereās what security teams need to understand.
(P.S. Our biggest sale of the year is live ā 50% off sitewide with NOEXCUSES50)
You canāt DevSecOps your way out of bad pipelines.
This bootcamp gets deep into automation, policy, SBOMs, and real security in CI/CD.
No buzzwords. Just hands-on, down-to-the-wire sessions.
š
Includes 2 Certification Exam Attempts
š Comes with 1-Year AppSecEngineer Pro+ Annual Subscription
Use the code āBOOTCAMP25ā and get 25% off.
Sign up today ā link in the comments.
Your CVE scanner passing doesnāt mean your software supply chain is secure.
Compromised dependencies, poisoned pipelines, and malicious updates often slip through unnoticed.
@abhaybhargav breaks it down in his latest G2 articleš
learn.g2.com/how-to-identifyā¦
Your AI model may not be hacked.
Its context may just be corrupted.
And thatās what makes context desynchronization dangerous.
No obvious exploit.
Just AI systems confidently making the wrong decisions.
This video breaks down how it happens in modern AI pipelines š
(P.S. Sitewide sale is live ā 50% off with NOEXCUSES50)
Everyoneās debating whether MCP is ādead.ā
Thatās the wrong conversation.
MCP gives AI agents access to tools.
Skills tell them how to use those tools safely, efficiently, and consistently.
And thatās exactly why MCP security matters.
As AI agents gain deeper access to codebases, databases, and environments, risks like Tool Poisoning, Agent Goal Hijacking, Command Injection, Shadow MCP Servers, and Secret Exposure become very real.
Thatās why we launched new hands-on MCP OWASP Top 10 coursesāto help security engineers understand how these attacks actually work in modern AI systems.
šÆ Learn the risks. Practice the defenses. Build real AI security skills.
š„ 50% OFF sitewide
Use code: NOEXCUSES50
š Link in comments
The scariest AI failure mode right now?
Not prompt injection.
Not model compromise.
Itās when the model works perfectlyā¦
ā¦but the context feeding it is wrong.
Thatās where things get dangerous.
Watch how this happens in modern AI pipelines.
Learn how to secure AI systems today on AppSecEngineer.
Healthcare software is one of the few environments where small security mistakes can scale into systemic risk.
Developers arenāt just writing code ā theyāre shaping how patient data flows across systems, APIs, and clinical workflows.
Secure coding becomes far more effective when teams move beyond generic guidance and start working with patterns that reflect the realities of healthcare systems.
The goal isnāt perfection.
Itās making the secure way the easiest way to build.
Learn more in the full guide (link in reply).
āProcess this invoice.ā
ā Agent issues a refund instead.
@abhaybhargav breaks down goal hijackingāan indirect prompt injection hidden in trusted data.
Watch š




